Known vulnerabilities in Moodle - page 23

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41081 - Exposure of sensitive information to an unauthorized actor
CVE-2014-7831
CWE-200 Low
No
No
- 24.11.2014 SB2014112403
#VU41082 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-7830
CWE-79 Low
No
No
2.5.9, 2.6.6, 2.7.3 24.11.2014 SB2014112403
#VU41335 - Permissions, Privileges, and Access Controls
CVE-2014-3617
CWE-264 Low
No
No
- 15.09.2014 SB2014091501
#VU41441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3544
CWE-79 Low
Available
No
2.4.11, 2.5.7, 2.6.4, 2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41442 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-3545
CWE-94 Low
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41443 - Permissions, Privileges, and Access Controls
CVE-2014-3546
CWE-264 Medium
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3547
CWE-79 Low
No
No
2.4.11, 2.5.7, 2.6.4, 2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41445 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3548
CWE-79 Low
No
No
2.4.11, 2.5.7, 2.6.4, 2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3549
CWE-79 Low
No
No
2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41447 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3550
CWE-79 Low
No
No
2.7.1 29.07.2014 SB2014072907
SB2014072108
#VU41448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3551
CWE-79 Low
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41449 - Improper Authentication
CVE-2014-3552
CWE-287 Low
No
No
- 29.07.2014 SB2014072908
SB2014072108
#VU41450 - Permissions, Privileges, and Access Controls
CVE-2014-3553
CWE-264 Low
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41451 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-3541
CWE-94 Medium
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41452 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3542
CWE-200 Medium
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41453 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3543
CWE-200 Medium
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU41610 - Cross-Site Request Forgery (CSRF)
CVE-2014-0213
CWE-352 Medium
No
No
- 27.05.2014 SB2014052704
SB2014052114
#VU41611 - Improper Authentication
CVE-2014-0214
CWE-287 Medium
No
No
- 27.05.2014 SB2014052704
SB2014052114
#VU41612 - Exposure of sensitive information to an unauthorized actor
CVE-2014-0215
CWE-200 Low
No
No
- 27.05.2014 SB2014052704
SB2014052114
#VU41613 - Permissions, Privileges, and Access Controls
CVE-2014-0216
CWE-264 Medium
No
No
- 27.05.2014 SB2014052704
SB2014052114


Showing elements 441 - 460 out of 605